Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
509 results · Feed
-
Unscored —
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows …
-
Unscored —CVE-2006-0200 EPSS 20%
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow r…
-
Unscored —CVE-2006-0206 Public exploit
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execu…
-
Unscored —CVE-2006-0198 Public exploit
Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers …
-
Unscored —
The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X serv…
-
Unscored —
Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands …
-
Unscored —
membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, whi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to injec…
-
Unscored —
Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unsp…
-
Unscored —
Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a…
-
Unscored —
SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere …
-
Unscored —CVE-2006-0194 Public exploit
Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remo…
-
Unscored —
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a l…
-
Unscored —
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote …
-
Unscored —
By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserCo…
-
Unscored —
login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthentica…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2006-0185 Public exploit
Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to…
-
Unscored —
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative accou…
-
Unscored —
Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to exe…
-
Unscored —
Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —
The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN pac…
-
Unscored —
Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protec…
-
Medium 5.3
The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP…
-
Unscored —
The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being…
-
Unscored —CVE-2006-0177 Public exploit
Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/sc…
-
Unscored —CVE-2006-0167 Public exploit
SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_…
-
Unscored —
addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-0171 Public exploit
PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-0163 Public exploit
SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Ente…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamm…
-
Unscored —CVE-2006-0173 Public exploit
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrep…
-
Unscored —
The netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of …
-
Unscored —CVE-2006-0174 Public exploit
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain…
-
Unscored —CVE-2006-0164 Public exploit
phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary…
-
Unscored —CVE-2006-0175 Public exploit
Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject ar…